Release
v5.2.2 — Socket.dev alert suppressions
socket.json: Added \
Read the release here or open the original release on GitHub.
What's Changed
Fixed
- socket.json: Added \
etworkAccess\ ignore entries for all Socket.dev-flagged files:
- 3 adapters with direct fetch use: HermesAdapter, PydanticAIAdapter, RLMAdapter
- 2 lib modules with direct fetch use: SwarmTransport, McpToolConsumer
- 1 false-positive: AuthGuardian (word \etch\ appears only in comments/regex, no HTTP calls)
- ~16 files flagged via Socket.dev transitive import-graph analysis (no direct fetch calls)
- socket.json: Added \shellExec\ ignore entries for:
- \AgentRuntime\ — ShellExecutor uses \child_process.spawn\ for sandboxed command execution under an explicit \SandboxPolicy\
- \McpToolConsumer\ — uses \child_process.spawn\ to launch stdio MCP server subprocesses
No functional changes. 2834 tests pass.